News for hackers. Stuff that matters.

A comment on Landrun: Sandbox any Linux process using Landlock, no root or containers. Parent comment

Re:Landrun: Sandbox any Linux process using Landlock, no roo... by fulafel on Sunday March 23, 2025 @05:59AM (#43451925)
Attaching a separate firewall rules to every process would be a bit heavyweight. What we do have is network namespaces that let you have networking rules (incl firewall) per a group of processes.
[ Parent | on HN ]
Re:Landrun: Sandbox any Linux process using Landlock, no roo... by 1oooqooq on Sunday March 23, 2025 @08:59AM (#43452594)
that's what all firewall apps on Android (bastardized Linux) does.

well, they already have a user namespace per app which they can match on the firewall rule, but a per "main" program pid net namespace would be pretty much the same. i guess this can be a cool patch to this plus a one weekend qt+rust gui to manage the firewall (or a patch to firewalld gui)... only if i ever had a weekend.

[ Parent | on HN ]